Why does fireshepard kill fire?

I assume there is a bug in firesheep that fireshepard uses.
The responsible line could be in this strange line in the facebook cookie.

fireshepard source
fire fighting source

+6
security exploit
source share
1 answer

They just launched FireShepard and FireSheep, that the "strange line" causes a syntax error when parsing the JSON result for the Facebook mock cookie, because the input is not escaped.

see Problem 88

It seems that the specific place that it fails is in FiresheepWorker.js in this part of the code:

 /* Read stdout until process exits */ var line; while (line = process.ReadOutputLine()) { var packet = JSON.parse(line); this._processPacket(packet); } /* Read any errors */ var errors = []; while (line = process.ReadErrorLine()) { errors.push(line); } 

Here is the cookie value from the Fireshepard source for reference:

"Cookie: lsd = spsse; c_user = 666660000; SCT = 01010101; ISS = 0; xs = 3randomhashyes666666666; ASDF = ?????????????? !!!!!!!!!!! !!!!!!!!!% • eëÒY¼ ¥ Áøþh¡F4 £ € º | SÍÂÝåt¹Òv5þhèŸË & %% ¥ O $ FsnÄ hº_ošŸ¿ÄGÜ5¼yy {ÃZÆ | O.E., þÊjo¬'W ¢ y¹¹y5ù | Êmk¤P " Ãt | [% 'o "û) 7 ° f²> ÎDk¹0vò € _ykW" = þ ... 5- ÃÒX & bð³l [$ ¯DZJ \ r \ n \ r \ n "; query + =" \ r \ n ";

+3
source share

All Articles